diff --git a/plugins/app-backend/package.json b/plugins/app-backend/package.json
index ec06cdadc4df9..74cff90bce622 100644
--- a/plugins/app-backend/package.json
+++ b/plugins/app-backend/package.json
@@ -36,7 +36,7 @@
     "@backstage/types": "^0.1.1",
     "@types/express": "^4.17.6",
     "globby": "^11.0.0",
-    "express": "^4.17.1",
+    "express": "^4.21.2",
     "express-promise-router": "^4.1.0",
     "fs-extra": "9.1.0",
     "helmet": "^4.0.0",